$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/7d7dc10a-737a-3507-8608-457a37bc28a2.roa File: 7d7dc10a-737a-3507-8608-457a37bc28a2.roa (raw, json) Hash identifier: VKzjDBQOXc0oRmwCnczN4zoaRTuaLJRoqp6XnfV150c= Subject key identifier: 0D:AD:9B:AE:C0:76:17:CF:0E:55:95:BC:65:56:0E:C1:4B:E5:4A:86 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584B48E1BEE994A0C61E849C10A0 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/7d7dc10a-737a-3507-8608-457a37bc28a2.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 23525 IP address blocks: 66.152.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:be:e9:94:a0:c6:1e:84:9c:10:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=f08d6524-7633-4ae7-8584-901e755d9221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7d:94:4c:94:f2:28:0d:65:17:f5:83:7b:d1: 20:f4:77:af:97:57:f5:25:1a:16:e2:48:59:84:c2: 8d:c2:41:92:90:e8:f2:ec:5b:8f:6a:46:f1:cb:d2: db:5b:ae:e4:77:e1:4a:ef:0b:93:f8:e1:e0:68:3f: dc:d8:6b:ba:db:7d:84:de:52:76:d3:03:61:c3:fd: 48:6b:a1:29:ac:02:c2:10:42:44:c5:4d:96:fd:c6: a2:da:c2:75:9e:6e:3a:29:f8:76:fa:bd:a8:c6:1e: ba:a9:ba:6e:5e:d1:00:ff:65:a1:a8:03:93:c9:8a: c9:30:ce:65:cb:a7:57:f1:93:63:e8:c7:27:c5:8b: f0:72:63:2e:ee:f6:72:e7:67:cc:da:84:9d:cc:71: 21:f8:10:f0:bd:66:82:bc:a0:a7:bb:14:90:17:92: 07:4d:d9:20:0d:ae:33:96:33:b5:cf:28:e1:c3:8f: 08:d9:2d:12:e0:00:f8:ae:ca:03:03:7f:39:55:da: 05:08:e7:00:91:f4:60:14:38:d0:d3:94:42:0b:18: 84:d9:2d:7d:39:be:e7:0a:e8:8d:ca:1d:b4:da:f1: 6c:a3:b2:36:d6:dd:e3:91:4d:16:ab:7f:0b:63:f1: 96:7a:78:b8:48:22:d3:de:1b:2c:70:ad:b3:b7:5e: 4f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:AD:9B:AE:C0:76:17:CF:0E:55:95:BC:65:56:0E:C1:4B:E5:4A:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/7d7dc10a-737a-3507-8608-457a37bc28a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 66.152.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:ba:fe:b5:d6:73:cc:85:67:ea:eb:31:3d:07:ce:05:59:93: f3:1f:0b:3d:b6:0e:6f:dd:83:84:68:0c:d2:8c:07:56:87:36: 22:37:4f:95:c1:7c:c0:7c:19:07:5d:05:f9:6d:b8:3a:72:c1: 4a:be:ac:de:b8:4f:46:40:ae:f5:06:63:9a:f9:c6:76:25:55: fe:35:5e:bf:fd:b1:e1:e8:c4:42:2c:7b:e7:41:47:3e:9b:bf: bb:69:73:3e:fc:97:a1:84:8b:b3:c9:0a:f6:34:52:9b:32:f6: b3:f9:36:90:3f:61:7a:f7:5c:74:0b:d6:af:39:0d:aa:b7:25: 4e:4a:2c:65:ef:a9:2b:57:ff:a4:d8:b9:0b:73:eb:bb:bc:74: b2:2f:1a:77:37:fb:a9:2d:f0:51:bb:90:cf:e6:b6:01:00:78: 8e:c6:47:7b:8f:b4:c9:78:30:e7:6e:c9:a9:4f:5a:c8:67:89: 60:f3:cd:d2:9f:11:cf:90:46:fe:1b:a8:cf:c1:b1:2d:fa:91: 9e:16:54:5a:82:d1:46:8b:c2:d5:50:dc:fb:29:02:d8:c8:0b: 1d:68:5e:89:45:c1:61:95:4c:6e:a9:e0:b4:15:56:3e:c7:63: 41:d4:be:77:a6:21:ad:2f:a2:6c:f5:ac:d2:81:60:89:21:d8: ae:ee:b1:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4b7plKDGHoScEKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjA4ZDY1MjQtNzYzMy00YWU3LTg1ODQtOTAxZTc1NWQ5MjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApX2UTJTyKA1lF/WDe9Eg9Hevl1f1JRoW4khZ hMKNwkGSkOjy7FuPakbxy9LbW67kd+FK7wuT+OHgaD/c2Gu6232E3lJ20wNhw/1I a6EprALCEEJExU2W/cai2sJ1nm46Kfh2+r2oxh66qbpuXtEA/2WhqAOTyYrJMM5l y6dX8ZNj6McnxYvwcmMu7vZy52fM2oSdzHEh+BDwvWaCvKCnuxSQF5IHTdkgDa4z ljO1zyjhw48I2S0S4AD4rsoDA385VdoFCOcAkfRgFDjQ05RCCxiE2S19Ob7nCuiN yh202vFso7I21t3jkU0Wq38LY/GWeni4SCLT3hsscK2zt15PdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2tm67AdhfPDlWVvGVWDsFL5UqGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvN2Q3ZGMxMGEtNzM3YS0z NTA3LTg2MDgtNDU3YTM3YmMyOGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQph+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFm6/rXWc8yFZ+rrMT0HzgVZk/MfCz22Dm/dg4RoDNKMB1aHNiI3T5XB fMB8GQddBfltuDpywUq+rN64T0ZArvUGY5r5xnYlVf41Xr/9seHoxEIse+dBRz6b v7tpcz78l6GEi7PJCvY0Upsy9rP5NpA/YXr3XHQL1q85Daq3JU5KLGXvqStX/6TY uQtz67u8dLIvGnc3+6kt8FG7kM/mtgEAeI7GR3uPtMl4MOduyalPWshniWDzzdKf Ec+QRv4bqM/BsS36kZ4WVFqC0UaLwtVQ3PspAtjICx1oXolFwWGVTG6p4LQVVj7H Y0HUvnemIa0vomz1rNKBYIkh2K7usW8= -----END CERTIFICATE-----Generated at Sat Oct 11 08:36:36 2025 by rpki-client